cvs: pear /PEAR_Info Info.php

sean Wed May 18 15:27:22 2005 EDT Modified files: /pear/PEAR_Info Info.php Log: XSS Fix http://cvs.php.net/diff.php/pear/PEAR_Info/Info.php?r1=1.19&r2=1.20&ty=u Index: pear/PEAR_Info/Info.php diff -u pear/PEAR_Info/Info.php:1.19 pear/PEAR_Info/Info.php:1.20 --- pear/PEAR_Info/Info.php:1.19 Mon Jan 3 12:33:43 2005 +++ pear/PEAR_Info/Info.php Wed May 18 15:27:22 2005 @@ -16,7 +16,7 @@ // | Authors: Davey Shafik <davey@pixelated-dreams.com> | // +----------------------------------------------------------------------+ // -// $Id: Info.php,v 1.19 2005/01/03 17:33:43 davey Exp $ +// $Id: Info.php,v 1.20 2005/05/18 19:27:22 sean Exp $ require_once 'PEAR/Remote.php'; require_once 'PEAR/Registry.php'; @@ -86,13 +86,13 @@ <table> <tr class="h"> <td> - <a href="http://pear.php.net/"><img src="<?php echo $_SERVER['PHP_SELF'];?>?pear_image=true" alt="PEAR Logo" /></a><h1 class="p">PEAR <?php echo $pear['version']; ?></h1> + <a href="http://pear.php.net/"><img src="<?php echo htmlentities($_SERVER['PHP_SELF']);?>?pear_image=true" alt="PEAR Logo" /></a><h1 class="p">PEAR <?php echo $pear['version']; ?></h1> </td> </tr> </table> <?php if (!isset($_GET['credits'])) { - echo '<h1><a href="' .$_SERVER['PHP_SELF']. '?credits=true">PEAR Credits</a></h1>'; + echo '<h1><a href="' . htmlentities($_SERVER['PHP_SELF']). '?credits=true">PEAR Credits</a></h1>'; // Get packageInfo and Show the HTML for the Packages $this->getConfig(); echo '<br />'; @@ -417,4 +417,4 @@ PEAR_Info::pearImage(); exit; } -?> \ No newline at end of file +?>